security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fb9c5841f4fde53437bc01b764060fdf63bf52ea
blue-team-tools/tools/config
T
History
vh fb9c5841f4 Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
..
generic
fix: fixed wrong field mapping in windows-audit source config
2019-11-09 22:42:00 +01:00
mitre
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
ala.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
arcsight-zeek.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
arcsight.yml
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
carbon-black.yml
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
crowdstrike.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
ecs-dns.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
ecs-proxy.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
ecs-zeek-corelight.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-defaultindex-filebeat.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-defaultindex-logstash.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-defaultindex.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-linux.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-windows.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-winlogbeat-sp.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
elk-winlogbeat.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
filebeat-defaultindex.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
filebeat-zeek-ecs.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
helk.yml
fix name of network_initiated
2020-01-13 00:12:04 -05:00
humio.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
limacharlie.yml
Small refactors to make more readable and remove deprecated code paths to increase coverage.
2019-10-28 10:49:05 -05:00
logpoint-windows.yml
add GroupSid to other configs
2019-09-11 04:53:30 -04:00
logstash-defaultindex.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
logstash-linux.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
logstash-windows.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
logstash-zeek-default-json.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
netwitness.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
powershell-windows-all.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
powershell.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
qradar.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
qualys.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
splunk-windows-index.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
splunk-windows.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
splunk-zeek.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
sumologic.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
thor.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
winlogbeat-modules-enabled.yml
Added Humio, Crowdstrike, Corelight
2020-05-08 13:41:52 +03:00
winlogbeat-old.yml
OSCD QA wave 1
2020-01-11 00:11:27 +01:00
winlogbeat.yml
OSCD QA wave 1
2020-01-11 00:11:27 +01:00